CWE-89

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized

The Tutor LMS Pro – eLearning and online course solution plugin for WordPress is vulnerable to time-based SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Vertical

Frappe is a full-stack web application framework. A carefully crafted request could extract data that the user would nor

WeGIA is a Web manager for charitable institutions. Prior to 3.4.10, there is a SQL Injection vulnerability in the /html

An SQL injection vulnerability in Yoosee application v6.32.4 allows authenticated users to inject arbitrary SQL queries

In the monitoring event logs page, it is possible to alter the http request to insert a reflect payload in the DB. Cause

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, the

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, the

A vulnerability has been found in HuangDou UTCMS V9 and classified as critical. This vulnerability affects the function

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Megatek Communicat

This vulnerability allows malicious actors to gain unauthorized access to the Zenitel ICX500 and ICX510 Gateway Billing

WeGIA is a Web manager for charitable institutions. Prior to version 3.5.0, WeGIA is vulnerable to SQL Injection attacks

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain acc

Improper neutralization of input provided by an authorized user in article positioning functionality allows for Blind SQ

Improper neutralization of input provided by an authorized user in article positioning functionality allows for Blind SQ

An attacker can obtain server information using Path Traversal vulnerability to conduct SQL Injection, which possibly ex

The WP Dispatcher plugin for WordPress is vulnerable to SQL Injection via the ‘id’ parameter in all versions up to, and

An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, the

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, the

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, the

ProjectWorlds Gym Management System1.0 is vulnerable to SQL Injection via the "id" parameter in the profile/edit.php pag

Apache Flink CDC version 3.4.0 was vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted databas

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.1, a SQL In

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.1, a SQL In

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Prior to 3.5.1, a SQL Inj

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP1). Affected applications are vulnerable to SQL

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager

DataEase is an open source data visualization and analytics platform. In versions 2.10.13 and earlier, the /de2api/datas

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip Time Pro

my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to

AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."

Nagios XI versions prior to 5.2.4 contain a SQL injection vulnerability in the notification search functionality. User-s

The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.0.7 / Nagios XI 5.7.4 contains multiple SQL injection

The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.3 / Nagios XI 5.8.5 contains a SQL injection vulner

SQL injection in Revive Adserver 6.0.0 causes potential disruption or information access when specifically crafted paylo

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hiberna

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions 7.

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions 8.9.0

U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to in

U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to in

TorrentPier is an open source BitTorrent Public/Private tracker engine, written in php. In versions up to and including

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized

An injection vulnerability has been discovered in the API feature in Digi On-Prem Manager, enabling an attacker with val

An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerabi

OpenSTAManager is an open source management software for technical assistance and invoicing. Prior to version 2.9.5, an

Multiple SQL Injections in Frappe CRM Dashboard Controller due to unsafe concatenation of user-controlled parameters int

SQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects Devolutions Server: through 2025

SQL Injection in Frappe HelpDesk in the dashboard get_dashboard_data due to unsafe concatenation of user-controlled para